Re: [PATCH nf-next] netfilter: flowtable: check namespace before iterating flows

Hi,

On 9/9/2026 7:16 PM, Phil Sutter wrote:

A second caller of nf_flow_table_gc_cleanup is
nf_flow_table_indr_cleanup in net/netfilter/nf_flow_table_offload.c. Is
the net_eq-check needed there as well? If not, could you please update
the patch description with a statement explaining why?

No. Its callback uses the device bound to the flowtable, which belongs to the same namespace.

Kind regards,
Qingfang